Is BitsLab Safe safe?
BitsLab Safe sends every visited URL and a persistent device identifier to its own servers, and transmits wallet and transaction details to Mixpanel.
On every page load, the extension's content script checks the current URL against a phishing blocklist by sending it—along with a persistent device UUID stored in chrome.storage—to safeapi.bitslab.xyz. When the extension flags a page as a phishing site, it also sends the user's connected crypto wallet address, the site hostname, and transaction details (including from/to addresses, chain ID, and risk verdict) to Mixpanel using a hardcoded project token.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itBitsLab Safe - no other listings under this identity
BitsLab Safe - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every secure site you visit
https://*/*
Read and change your data on every site you visit
http://*/*
Store data in your browser
storage
Where it sends data
Destinations our analysis observed BitsLab Safe contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api-js.mixpanel.comwidely used
BitsLab Safe sends data to api-js.mixpanel.com. A widely used service: 48 other extensions we have analyzed send data here.
- safeapi.bitslab.xyz
BitsLab Safe sends data to safeapi.bitslab.xyz. No other extension we have analyzed sends data here.